Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/B69E6026355C11F0B8094E3AC4F9AE02.roa
File:                     B69E6026355C11F0B8094E3AC4F9AE02.roa (raw, json)
Hash identifier:          WbRkZBA9PNEYhWDMHVJVxZ0NU4zDzXKWpGvmmD0/x40=
Subject key identifier:   32:26:17:88:30:D7:A0:D2:B5:77:C4:37:7E:E2:34:01:BF:EC:10:B1
Certificate issuer:       /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial:       0598
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/B69E6026355C11F0B8094E3AC4F9AE02.roa
Signing time:             Tue 20 May 2025 09:27:56 +0000
ROA not before:           Tue 20 May 2025 09:27:56 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     932
IP address blocks:        103.214.174.0/23 maxlen: 24
                          182.255.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
                          rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 23:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1432 (0x598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
        Validity
            Not Before: May 20 09:27:56 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=682c4b1c-1c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:97:02:b1:00:4f:47:ad:d4:3c:6d:33:89:08:
                    6a:9a:63:f8:ff:e4:4c:62:cf:d4:67:48:f1:c8:40:
                    5f:c7:1a:1e:4f:fb:83:68:35:37:7b:77:fc:67:d0:
                    b8:9c:b2:71:00:9f:69:9a:1e:c5:a6:84:94:67:72:
                    7b:ed:7c:13:3b:7d:35:df:78:f3:21:9e:2f:77:47:
                    0b:40:0b:aa:17:00:20:90:e5:54:82:2a:81:8a:4a:
                    83:44:74:9c:09:33:2a:b7:79:e6:39:db:de:c7:ff:
                    40:e6:ab:b4:0b:bd:d7:3f:f5:ec:d4:a6:ae:f1:28:
                    ee:fd:00:5b:4c:d8:24:bd:af:ac:fe:4f:c3:6d:4a:
                    48:4c:1c:9e:05:7c:8c:8c:6b:d6:1b:ef:6e:62:e0:
                    a3:10:67:88:d1:84:00:37:ad:ea:0c:e9:a7:8b:e9:
                    fd:07:09:5f:94:d5:bf:bf:bf:2d:86:6e:45:5e:56:
                    83:e5:ca:5a:57:1c:25:f7:f2:e9:ae:49:e1:aa:c9:
                    16:12:88:b2:ff:b2:3c:5e:11:0b:49:a6:f2:fc:29:
                    4e:4b:74:dc:2e:50:ca:71:31:ac:1f:26:04:4f:e9:
                    7e:18:9e:4d:ef:fe:fb:34:b1:c7:38:7d:c3:00:34:
                    ab:da:c0:ca:cb:53:57:74:a0:60:a7:88:fc:cd:34:
                    50:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:26:17:88:30:D7:A0:D2:B5:77:C4:37:7E:E2:34:01:BF:EC:10:B1
            X509v3 Authority Key Identifier:
                keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/B69E6026355C11F0B8094E3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.174.0/23
                  182.255.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:13:db:ba:ad:5e:3e:f0:83:b7:de:bb:82:b1:3e:fd:f4:de:
         bb:5b:48:05:83:e0:74:8a:fe:03:4f:3c:7b:87:48:2b:5d:ca:
         df:e7:ef:6a:6c:30:d1:45:7f:3c:49:82:e9:0f:b9:35:c5:30:
         c2:ec:e9:5c:e5:46:02:0e:26:4a:a0:33:8f:37:5c:77:67:64:
         1f:71:d2:3b:da:63:92:24:e3:ad:8e:ef:4f:5e:d2:93:b1:29:
         14:fa:0a:b5:be:42:3b:22:2b:e5:4a:0c:33:a5:2e:c4:a1:95:
         2b:9d:a5:f9:f5:07:ae:b4:2f:4f:70:71:4a:15:a4:0b:60:3f:
         0c:81:0c:60:66:9f:a0:f6:29:34:3e:f5:f8:60:f6:34:ff:aa:
         0d:90:17:13:d7:eb:95:cb:a6:4f:ce:d4:64:4f:ee:0a:1c:d5:
         b7:3d:ae:26:57:59:d0:53:d3:be:f5:b2:ca:5f:dd:05:27:3b:
         63:93:17:20:7d:09:6f:99:fd:11:50:ae:e7:b0:37:f9:a1:00:
         a0:52:1c:b2:f9:b2:0e:33:64:1b:12:3e:94:0f:ca:ec:b6:21:
         ca:ed:0e:47:62:06:ab:b3:34:6b:f0:53:f2:42:73:2b:97:ba:
         b8:3e:2f:ec:12:4a:16:0f:a1:00:44:72:02:9f:2c:2f:c4:bb:
         0c:7e:67:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:57:55 2025 by rpki-client